10757 matches found
Ubuntu: Security Advisory (USN-5903-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libdwarf:fuzz_die_cu_offset: Stack-buffer-overflow in dwarf_get_version_of_die
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5171954224332800 Project: libdwarf Fuzzing Engine: honggfuzz Fuzz Target: fuzzdiecuoffset Job Type: honggfuzzasanlibdwarf Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash...
libdwarf:fuzz_die_cu_attrs: Stack-buffer-overflow in dwarf_dietype_offset
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4953133005799424 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzdiecuattrs Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address:...
USN-5903-1: lighttpd vulnerabilities
It was discovered that lighttpd incorrectly handled certain inputs, which could result in a stack buffer overflow. A remote attacker could possibly use this issue to cause a denial of service DoS. CVE-2022-22707, CVE-2022-41556...
Ubuntu: Security Advisory (USN-5889-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5889-1: ZoneMinder vulnerabilities
It was discovered that ZoneMinder was not properly sanitizing URL parameters for certain views. An attacker could possibly use this issue to perform a cross-site scripting XSS attack. This issue was only fixed in Ubuntu 16.04 ESM. CVE-2019-6777 It was discovered that ZoneMinder was not properly...
Tenda AX3 SetSysTimeCfg Stack Buffer Overflow Vulnerability
Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from a stack overflow vulnerabili...
OSV-2023-113 Stack-buffer-overflow in dump_stats
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56339 Crash type: Stack-buffer-overflow READ 4 Crash state: dumpstats flacanalyzeframe writecallback...
glog:fuzz_demangle: Dynamic-stack-buffer-overflow in google::ParseUnqualifiedName
Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=6301446183452672 Project: glog Fuzzing Engine: afl Fuzz Target: fuzzdemangle Job Type: aflasanglog Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1 Crash Address: 0x7ffceae391bc Crash...
glog:fuzz_demangle: Dynamic-stack-buffer-overflow in google::ParseUnscopedName
Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=4668696045158400 Project: glog Fuzzing Engine: afl Fuzz Target: fuzzdemangle Job Type: aflasanglog Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 1 Crash Address: 0x7ffe75fb14bb Crash...
flac:fuzzer_tool_flac: Stack-buffer-overflow in dump_stats
Project: https://github.com/xiph/flac.git Detailed Report: https://oss-fuzz.com/testcase?key=4839661043580928 Project: flac Fuzzing Engine: afl Fuzz Target: fuzzertoolflac Job Type: aflasanflac Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7fffce05161c Crash State:...
suricata:fuzz_siginit: Stack-buffer-overflow in strlcpy
Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=5613236528742400 Project: suricata Fuzzing Engine: honggfuzz Fuzz Target: fuzzsiginit Job Type: honggfuzzasansuricata Platform Id: linux Crash Type: Stack-buffer-overflow WRITE Crash Address:...
Debian dla-3335 : asterisk - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3335 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3335-1 [email protected]...
CVE-2022-28331
A flaw was found in Apache Portable Runtime, affecting versions = 1.7.0. This issue may allow a malicious user to write beyond the end of a stack buffer and cause an integer overflow. This affects Windows environments...
K61164061: PHP vulnerability CVE-2017-9227
Security Advisory Description An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbcenclen during regular expression searching. Invalid handling of reg-dmin in forwardsearchrange could...
K73540515: Linux kernel vulnerability CVE-2018-14633
Security Advisory Description A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 1...
OSV-2023-88 Stack-buffer-overflow in pdfi_read_cff_dict
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56156 Crash type: Stack-buffer-overflow WRITE 1 Crash state: pdfireadcffdict pdfireadcffdict pdfireadcfffont...
PT-2023-36024 · Git +1 · Ghostscript
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the crash type being a Stack-buffer-overflow WRITE 1. Th...
FreeBSD : libde256 -- multiple vulnerabilities (421c0af9-b206-11ed-9fe5-f4a47516fb57)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 421c0af9-b206-11ed-9fe5-f4a47516fb57 advisory. - libde265 v1.0.4 contains a heap buffer overflow in the putepelhvfallback function, which can...